CVE-2021-28186 ASUS BMC's firmware: buffer overflow - ActiveX configuration-2 acquisition
Remote attackers can cause a buffer overflow in ASUS BMC firmware, leading to abnormal termination of the web service and denial of service.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-28186?
CVE-2021-28186 is a medium-severity memory corruption vulnerability in ASUS BMC firmware for ASMB8-iKVM, published on 6 Apr 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.
Weakness: CWE-120
Which versions are affected by CVE-2021-28186?
It affects 3 products.
Products include Asus Asmb8-Ikvm Firmware, Asus Z10pe-D16 Ws Firmware, Asus Z10pr-D16 Firmware.
How do I fix CVE-2021-28186?
No fix has been published for CVE-2021-28186 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-28186 being exploited?
There is no known exploitation of CVE-2021-28186 in the wild and no public exploit code.
Other vulnerabilities in ASUS BMC firmware for ASMB8-iKVM
- CVE-2023-26602 Command injection in n/a
- CVE-2021-28203 ASUS BMC's firmware: command injection - Web Set Media Image function
- CVE-2021-28204 ASUS BMC's firmware: command injection - Modify user’s information function
- CVE-2021-28175 ASUS BMC's firmware: buffer overflow - Radius configuration function
- CVE-2021-28176 ASUS BMC's firmware: buffer overflow - DNS configuration function
Sources
Also known as GHSA-8p5w-j26w-7656.